CVE-2023-20125

CVE-2023-20125 is a high-severity denial-of-service vulnerability affecting the local interface of Cisco BroadWorks Network Server. The flaw, stemming from a lack of rate limiting for certain TCP connections, allows an unauthenticated, remote attacker to exhaust system resources by sending a high volume of connections, rendering the server unusable and requiring a restart or reboot for recovery. With a CVSS score of 8.6, this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to a high impact on availability. While Cisco has released software updates, there are no workarounds. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.